Help Net Security Newsletter - May 2, 2023

Latest information security news and research from Help Net Security

Help Net Security weekly newsletter View in your browser. Cut Back Your Manual Effort Securing the Cloud Looking to automate your cloud security efforts? The Center for Internet Security has released a new hardening component in EC2 Image Builder that can help! Using automation, the CIS component makes it easier to build a golden image natively in AWS. Learn More. Latest news: Using just-in-time access to reduce cloud security risk Cybercriminals use proxies to legitimize fraudulent requests Using multiple solutions adds complexity to your zero trust strategy Infosec products of the month: April 2023 Week in review: PaperCut vulnerabilities, VMware fixes critical flaws, RSA Conference 2023 EU moves to regulate tech titans with Digital Services Act The double-edged sword of generative AI New infosec products of the week: April 28, 2023 Password reset woes could cost FTSE 100 companies $156 million each month Phishing-resistant MFA shapes the future of authentication forms 5G surpasses expectations, becomes a global game-changer Photos: RSA Conference 2023 Early Stage Expo Photos: RSA Conference 2023, part 3 PaperCut vulnerabilities leveraged by Clop, LockBit ransomware affiliates GitHub introduces private vulnerability reporting for open source repositories The true numbers behind deepfake fraud Generative AI and security: Balancing performance and risk CISOs struggle to manage risk due to DevSecOps inefficiencies eBook: Security Compliance for CISOs Photos: RSA Conference 2023, part 2 Common insecure configuration opens Apache Superset servers to compromise RSA Conference 2023 video walkthrough Google Authenticator updated, finally allows syncing of 2FA codes VMware fixes critical flaws in virtualization software (CVE-2023-20869, CVE-2023-20870) Photos: RSA Conference 2023 Overcoming industry obstacles for decentralized digital identities CISOs: unsupported, unheard, and invisible Are you ready for PCI DSS 4.0? New coercive tactics used to extort ransomware payments Corporate boards pressure CISOs to step up risk mitigation efforts Most SaaS adopters exposed to browser-borne attacks Google adds new risk assessment tool for Chrome extensions Attackers are logging in instead of breaking in PoC exploit for abused PaperCut flaw is now public (CVE-2023-27350) AI tools help attackers develop sophisticated phishing campaigns The silent killers in digital healthcare Rethinking the effectiveness of current authentication initiatives The double-edged sword of open-source software Organizations are stepping up their game against cyber threats 3CX breach linked to previous supply chain compromise VMware plugs security holes in VMware Aria Operations for Logs (CVE-2023-20864, CVE-2023-20865) How product security reached maturity Unlocking the passwordless era Over 70 billion unprotected files available on unsecured web servers Study of past cyber attacks can improve organizations' defense strategies Videos: Introducing the book: The VC Field Guide Why juice jacking is overhyped RSA Conference 2023 video walkthrough Securing the rapidly developing edge ecosystem How CISOs navigate security and compliance in a multi-cloud world Industry news: UK Cyber Security Council launches certification mapping tool CSI releases IT Governance to meet growing regulatory expectations Codenotary unveils SBOMcenter to ensure software supply chain security Swissbit iShield Key Pro safeguards online accounts, web services Skyhigh Security unveils major updates to product portfolio Thales CTE-RWP protects critical files and folders from ransomware attacks ThreatX strengthens API and application protection with Botnet Console and API Catalog 2.0 Tessian Respond enables security teams to identify and respond to email threats Cybersecurity leaders introduced open-source information sharing to help OT community Graylog 5.1 optimizes threat detection and response Forcepoint Data Security Everywhere simplifies DLP management Eclypsium launches Supply Chain Security Platform with SBOM capability Uptycs unveils cloud security early warning system Cynet announces platform updates to help organizations protect their systems and infrastructure Traceable AI Zero Trust API Access detects and classifies the data that APIs are handling Code42 adds real-time blocking capabilities to the Incydr IRM solution ExtraHop simplifies approach to intrusion detection for security teams with new solutions ManageEngine releases MSSP Edition of Log360 Cloud Sophos' MDR service customer base grows 33% in first 6 months since launching new capabilities Akamai Prolexic Network Cloud Firewall defends organizations against DDoS attacks Seclore puts risk into focus with new data classification and risk insights capabilities Immuta releases new data security features to help users accelerate remediation efforts Halo Security detects exposed secrets and API keys in JavaScript IT-Harvest unveils Analyst Dashboard 5.0 with integrated OpenAI's Socrates Bot Deep Instinct partners with eSentire to protect customers from unknown and zero-day attacks SecurityScorecard introduces security ratings platform with OpenAI's GPT-4 search system Cisco XDR prioritizes security incidents using evidence-backed automation Cyera enhances its AI-powered data security platform to stop sensitive data exfiltration Thales' new secrets management solution improves DevOps and cloud security Palo Alto Networks Unit 42 expands its DFIR service globally VMware announces new security capabilities to help protect hybrid workforce Abnormal Security expands its platform and launches new products RidgeShield monitors traffic across workloads and enforces unified security policies AWS boosts Amazon GuardDuty with 3 new capabilities to protect varied workloads MITRE Caldera for OT tool enables security teams to run automated adversary emulation exercises IBM Security QRadar Suite streamlines security analysis throughout the incident process Arista Networks unveils AI-driven network identity service SentinelOne unveils cybersecurity AI platform National Cybersecurity Alliance launches HBCU Scholarship Program Don't let manual processes hold you back, automate your AppSec D3 Security MSSP Client Portal simplifies information sharing between MSSPs and clients Flashpoint Ignite accelerates cross-functional risk mitigation and prevention Akamai Brand Protector defends against phishing attacks and fake websites Trellix Threat Intelligence enhancements accelerate threat analysis and response Resecurity to showcase innovative cybersecurity solutions at RSA Conference 2023 Patented.ai releases LLM Shield to safeguard sensitive info from chatbots Expel Vulnerability Prioritization identifies critical and‌ damaging vulnerabilities Copyright © 2023 Astus d.o.o. (Help Net Security), All rights reserved. You are receiving Help Net Security newsletter because you opted in at our web site located on www.helpnetsecurity.com. Help Net Security newsletter contains weekly overview of all the latest information security news. Our mailing address is: Astus d.o.o. (Help Net Security) Kastav Kastav 51215 Croatia Add us to your address book Want to change how you receive these emails? You can update your preferences or unsubscribe from this list